Lead Cybersecurity Engineer (Level V)

TRC Talent Solutions; Georgia; Hybrid; USD 110,000 - 170,000; Full time

Job summary

TRC Talent Solutions seeks a Cybersecurity Engineer V to own the enterprise security stack, focusing on threat detection, vulnerability management, cloud security, and incident response.

You will lead security engineering initiatives, mentor teams, and drive maturity of the organization’s security program across Azure/AWS/GCP, Kubernetes, Docker, and VMware. Hybrid work is supported.

Qualifications

• Bachelor's degree in Cybersecurity, CS, Eng, IT, or 12+ years experience in lieu of degree.
• 8+ years of dedicated cybersecurity engineering/operations experience.
• Expert-level knowledge of security architecture and enterprise integration.
• Hands-on with SIEM and IDS/IPS platforms; MITRE ATT&CK use cases.
• Cloud security across Azure, AWS or GCP; Zero Trust preferred.

Responsibilities

• Lead implementation and administration of enterprise cybersecurity platforms (SIEM, EDR, monitoring).
• Develop detection rules, alerting logic, and IOC integrations; hunt for indicators of compromise.
• Oversee incident response end-to-end, investigations, root-cause, playbooks.
• Manage vulnerability lifecycle: scanning, risk assessment, remediation prioritization, validation.
• Secure containerized/virtualized environments (Kubernetes, Docker, VMware) and cloud security controls.
• Create and maintain security baselines, least-privilege policies, DLP and data protection measures.
• Collaborate with MSSPs, SOCs, and cross-functional teams to evolve security program.
• Advise leadership on roadmaps and program maturity; mentor junior staff.
• Document policies, procedures, standards, and technical baselines.

Skills

SIEM

EDR

MITRE ATT&CK

Incident response

Cloud security

Zero Trust

NIST CSF

ISO 27001

Kubernetes

Docker

Education

Bachelor's degree (Cybersecurity/CS/Engineering/IT)

12+ years experience in lieu of degree

Tools

Azure

AWS

GCP

VMware

Job description

Job Description

Client Overview

Our client is a premier enterprise organization dedicated to securing the digital infrastructure that powers mission-critical regional operations. Offering a highly stable environment that provides shared services to a broader family of companies, this organization treats cybersecurity as the absolute foundation of its operational resilience. This is an exceptional opportunity to join an industry leader that invests heavily in technology and values security as a core business driver.

Overview

This position exists to drive practical risk reduction and secure technology operations across the entire enterprise. As a foundational pillar of the organization's security posture, the role directly impacts the company's ability to protect sensitive data, proactively mitigate threats, and maintain continuous, resilient operations against an ever-evolving threat landscape.

Summary

As a Cybersecurity Engineer V, you will serve as a senior technical subject matter expert focused on threat detection, vulnerability management, cloud security, and incident response. This role is ideal for an experienced cybersecurity leader who thrives on owning the enterprise security stack, spearheading complex security engineering initiatives, and mentoring technical teams to mature the organization's overall security program.

Responsibilities

• Lead the implementation, optimization, and administration of enterprise cybersecurity platforms, including SIEM, EDR, and comprehensive security monitoring solutions.
• Develop and maintain advanced detection rules, alerting logic, and threat intelligence integrations while proactively hunting for indicators of compromise (IOCs).
• Direct end-to-end incident response efforts, encompassing deep investigations, root-cause analysis, corrective actions, and playbook creation.
• Drive the vulnerability management lifecycle by overseeing scanning, risk assessment, remediation prioritization, validation testing, and risk reduction reporting.
• Implement robust security controls within Azure, AWS, or GCP environments, alongside securing containerized and virtualized platforms (e.g., Kubernetes, Docker, VMware).
• Design and maintain enterprise infrastructure security technologies, secure configuration baselines, hardening standards, and least-privilege initiatives.
• Execute enterprise data protection strategies, including data classification policies and Data Loss Prevention (DLP) implementations.
• Collaborate strategically with MSSPs, third-party SOCs, and internal cross-functional teams to evaluate new technologies and integrate critical security requirements.
• Advise senior leadership on strategic planning, security roadmaps, and overall program maturity.
• Mentor junior cybersecurity professionals and act as a senior technical escalation point for infrastructure, EUC, application, and cloud teams.
• Conduct adversary emulation and control validation activities leveraging blue, red, or purple team methodologies.
• Author and maintain comprehensive cybersecurity documentation, including policies, procedures, standards, guidelines, and technical baselines.

Qualifications

• Education: Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related field (or 12+ years of relevant experience in lieu of a degree).
• Experience: 8+ years of dedicated, proven experience in cybersecurity or information security engineering and operations.
• Technical Skills: Expert-level knowledge of security architecture, engineering principles, and enterprise technology integration. Hands-on expertise with SIEM and IDS/IPS platforms, developing MITRE ATT&CK detection use cases, and leading incident response.
• Advanced Architecture: Experience securing modern cloud infrastructure (Azure, AWS, or GCP) and virtualized environments. Zero Trust architecture experience is highly preferred.
• Industry Frameworks: Strong working knowledge of industry-standard frameworks such as NIST CSF, NIST 800-53, CIS Controls, and ISO 27001.
• Soft Skills: Advanced analytical and troubleshooting skills with the ability to interpret complex security events. Excellent written and verbal communication skills to effectively translate technical issues to non-technical stakeholders.
• Certifications: CISSP or GIAC certifications are highly preferred. Additional certifications such as CySA+, CCSP, CISM, GCIH, or OSCP are a strong plus.

Work Requirements

Ability to work a hybrid office schedule and provide occasional evening, weekend, or after-hours support for critical operations and security event response.

TRC Talent Solutions is proud to be an Equal Oppor